Technical Information
- '19#.#23.44.138':80
- http://19#.#23.44.138/loader/uploads/newclipper3003_Whxgnhgn.png
- DNS ASK google.com
- '%WINDIR%\syswow64\cmd.exe' /c ping google.com && timeout 10' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c timeout 20' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /C chcp 65001 && ping 127.0.0.1 && schtasks /create /tn "<File name>" /sc MINUTE /tr "%LOCALAPPDATA%\ServiceHub\<File name>.exe" /rl HIGHEST /f && DEL /F /S /Q /A "<Full path to file>" &&START ...' (with hidden window)
- '%WINDIR%\syswow64\cmd.exe' /c ping google.com && timeout 10
- '%WINDIR%\syswow64\ping.exe' google.com
- '%WINDIR%\syswow64\timeout.exe' 10
- '%WINDIR%\syswow64\cmd.exe' /c timeout 20
- '%WINDIR%\syswow64\timeout.exe' 20
- '%WINDIR%\syswow64\cmd.exe' /C chcp 65001 && ping 127.0.0.1 && schtasks /create /tn "<File name>" /sc MINUTE /tr "%LOCALAPPDATA%\ServiceHub\<File name>.exe" /rl HIGHEST /f && DEL /F /S /Q /A "<Full path to file>" &&START ...
- '%WINDIR%\syswow64\chcp.com' 65001
- '%WINDIR%\syswow64\ping.exe' 127.0.0.1
- '%WINDIR%\syswow64\schtasks.exe' /create /tn "<File name>" /sc MINUTE /tr "%LOCALAPPDATA%\ServiceHub\<File name>.exe" /rl HIGHEST /f